Login Request a demo
High severity · published Sep 17, 2026
CVE-2026-78428
Flaw in Neuvector can result in one user receiving another user's authenticated session when multiple SSO login attempts occur concurrently
8.8
CVSS
0.3%
EPSS
No
On KEV
Description
For users authenticated through SAML or OpenID Connect (OIDC), this vulnerability can result in one user receiving another user's authenticated session when multiple SSO login attempts occur concurrently
Exploitation
Is it being used?
Exploit prediction (EPSS)0.3% · higher than 19% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
NE
neuvector · SUSE
<5.6.1 · source: vendor
Affected product
NE
neuvector
SUSE
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2026-78428
CVE.org
https://www.cve.org/CVERecord?id=CVE-2026-78428
vendor-advisory
https://github.com/neuvector/neuvector/security/advisories/GHSA-c6rx-pmvf-m3jx
issue-tracking
https://bugzilla.suse.com/show_bug.cgi?id=1279937
More from neuvector
8.8
CVE-2026-78424
OS Command Injection in Packet-Capture (Sniffer) Filter leading to Remote Code Execution on Kubernetes Nodes
7.3
CVE-2026-25703
Potential information leakage from manager /network/graph API in NeuVector
6.8
CVE-2025-46808
Sensitive information is leaked into NeuVector’s manager container logs
2.0
CVE-2026-78426
Logout bypass via alternate JWT spelling